This document sets out the public process by which an individual may exercise privacy rights with LeStudio Limited under applicable New Zealand privacy law.
1. Scope and Contact
1.1 Scope
This process applies to requests concerning personal information held by LeStudio Limited.
1.2 Privacy Contact
Requests may be sent to privacy@lestudio.co.nz.
1.3 Address
LeStudio Limited 27 Broadfell Avenue Avonhead, Christchurch 8042 New Zealand
1.4 Privacy Officer
LeStudio's Privacy Officer is Logan Evans.
2. Available Requests
2.1 Access
An individual may ask LeStudio to provide access to personal information held about that individual, subject to applicable law.
2.2 Correction
An individual may ask LeStudio to correct personal information which the individual considers inaccurate, incomplete or otherwise in need of correction.
2.3 Privacy Enquiry or Complaint
An individual may ask LeStudio to explain a privacy practice or may submit a privacy complaint.
2.4 Account Closure Distinguished
Account closure is a separate operational process. A request to close an Account does not automatically override statutory, contractual, security, evidential or other lawful retention obligations.
3. Information to Include in a Request
3.1 Sufficient Detail
A request should contain enough information for LeStudio reasonably to locate and understand the relevant records.
3.2 Helpful Information
Where relevant, include:
- the email address associated with the Account or enquiry;
- the relevant LeStudio Service;
- the approximate period concerned;
- the information sought;
- the correction requested and the basis for that correction.
3.3 Sensitive Credentials
Do not send passwords, one-time codes, private keys or unnecessary sensitive credentials with a privacy request.
4. Identity and Authority Verification
4.1 Verification
LeStudio may require reasonable and proportionate evidence of identity before disclosing sensitive personal information.
4.2 Representatives
Where a person acts on behalf of another individual, LeStudio may require reasonable evidence of authority.
4.3 Proportionality
Verification will be proportionate to the sensitivity of the information and the risk of unauthorised disclosure.
4.4 Receipt Date
LeStudio progresses verification promptly and does not internally treat reasonable verification as silently restarting the date on which the request was received.
5. Statutory Timeframe
5.1 General Rule
LeStudio records the date on which a New Zealand access or correction request is received.
5.2 Decision Deadline
LeStudio will respond as soon as reasonably practicable and normally no later than 20 working days after receipt, subject to any lawful extension.
5.3 Extension
If LeStudio relies on a statutory extension, LeStudio will provide the notice required by law.
6. Access Requests
6.1 Search and Assessment
LeStudio will take reasonable steps to identify information within the scope of a valid access request.
6.2 Provision of Information
Where access is required, LeStudio will provide the information in a form permitted by law and reasonably appropriate to the circumstances.
6.3 Withholding
LeStudio may withhold information only where applicable law permits or requires that result.
6.4 Notice of Decision
Where a request is refused in whole or in part, LeStudio will provide the reasons, notice or complaint information required by law.
7. Correction Requests
7.1 Consideration
LeStudio will consider a requested correction and the evidence reasonably relevant to that request.
7.2 Correction Made
Where LeStudio agrees that information should be corrected, LeStudio will take reasonable steps to make the correction.
7.3 Correction Not Made
If LeStudio does not make the requested correction, the individual may request that a statement of the correction sought be attached where the Privacy Act 2020 provides that right.
7.4 Recipients
Where required by law, LeStudio will take the applicable steps concerning persons or organisations to whom corrected information, or a statement of correction, should be communicated.
8. Fees and Administrative Burden
8.1 Ordinary Requests
LeStudio does not intend to impose unnecessary procedural barriers on an ordinary privacy request.
8.2 Lawful Charges or Conditions
If Applicable Law permits a fee, condition or other procedural step in a particular case, LeStudio will apply it only to the extent lawfully permitted and reasonably necessary.
9. Privacy Complaints
9.1 Internal Complaint
A privacy complaint may be sent to privacy@lestudio.co.nz.
9.2 Investigation
LeStudio will record and reasonably investigate a privacy complaint having regard to its nature and seriousness.
9.3 Office of the Privacy Commissioner
An individual may also complain to the New Zealand Office of the Privacy Commissioner where entitled to do so.
9.4 No Mandatory Internal Exhaustion
LeStudio does not represent that a person must exhaust LeStudio's internal process before approaching the Commissioner where the law permits otherwise.
10. Secure Handling of Requests
10.1 Confidentiality
LeStudio will take reasonable steps to protect personal information generated or collected in the course of administering a privacy request.
10.2 Secure Exchange
Where ordinary email is not reasonably appropriate for sensitive material, LeStudio may arrange another suitable method for exchange.
10.3 Request Records
LeStudio may retain a privacy-request case record where reasonably required for accountability, legal compliance or dispute management in accordance with its retention framework.
11. Relationship with Other Legal Documents
11.1 Privacy Statement
This process must be read together with the LeStudio Privacy Statement.
11.2 Terms of Service
Account administration and closure are also governed by the Terms of Service and applicable Product Terms.
11.3 Legal Archive
Published versions of this process will be preserved through the Legal Archive.
12. Contact
12.1 Privacy
privacy@lestudio.co.nz
12.2 Legal
legal@lestudio.co.nz